@open-mercato/ai-assistant 0.6.7 → 0.6.8-develop.6875.1.871a4afc94

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:ai-assistant] found 220 entry points
+[build:ai-assistant] found 231 entry points
 [build:ai-assistant] built successfully

package/AGENTS.md

@@ -880,6 +880,16 @@ yarn mcp:serve
 
 Typed pending-action lifecycle events live in `src/modules/ai_assistant/events.ts` and are emitted via the shared `emitAiAssistantEvent` helper (`createModuleEvents`). The three ids are FROZEN per `BACKWARD_COMPATIBILITY.md` §5 and MUST NOT be renamed; payload fields are additive-only. `ai.action.confirmed` fires from `executePendingActionConfirm` with `{ pendingActionId, agentId, toolName, status, tenantId, organizationId, userId, resolvedByUserId, resolvedAt, executionResult, failedRecords? }`; `ai.action.cancelled` fires from `executePendingActionCancel` with the same shape plus an optional `reason`; `ai.action.expired` fires from the cancel helper's TTL short-circuit (and the Step 5.12 cleanup worker) with `resolvedByUserId: null` and additional `expiresAt` / `expiredAt` timestamps. All three use `category: 'system'` and `entity: 'ai_pending_action'`.
 
+`ai_assistant.moderation_flag.created` (`entity: 'ai_moderation_flag'`) fires best-effort from the input-moderation gate; payload carries flagged category names only, never prompt content.
+
+## Input moderation & safety identifiers
+
+Guide: [`moderation.mdx`](../../apps/docs/docs/framework/ai-assistant/moderation.mdx) + spec `.ai/specs/2026-06-04-ai-input-moderation-and-safety-identifiers.md`. Envs: `OM_AI_INPUT_MODERATION`, `OM_AI_MODERATION_MODEL`.
+
+- Enforced surfaces (`untrustedInput`) fail **closed**; opt-in surfaces fail **open**.
+- Flagged categories are audit-only — never send them to the client.
+- The audit write is best-effort and MUST NOT block the rejection.
+
 ## Rules for the OpenCode Client
 
 Located in `lib/opencode-client.ts`. Use these methods when interacting with OpenCode:
@@ -1620,12 +1630,6 @@ Note: the guard is intentionally NOT added to `mcp-client.ts` `connectHttp`, whi
 - `src/modules/ai_assistant/lib/opencode-handlers.ts` - Fixed Promise.race completion bug
 - `src/frontend/hooks/useCommandPalette.ts` - Added ref pattern for sessionId
 
-**Diagnostic logging added** (can be removed after verification):
-- `[handleSubmit] DIAGNOSTIC` - Session check before routing
-- `[sendAgenticMessage] DIAGNOSTIC` - Request payload before fetch
-- `[startAgenticChat] DIAGNOSTIC` - Done event handling
-- `[AI Chat] DIAGNOSTIC` - Backend request received
-
 ### 2026-01 - OpenCode Integration
 
 **Lesson learned:** When replacing an AI backend, preserve the session management contract — the frontend depends on `sessionId` in `done` events regardless of the underlying AI engine.
@@ -1645,30 +1649,9 @@ Note: the guard is intentionally NOT added to `mcp-client.ts` `connectHttp`, whi
 - `src/frontend/components/CommandPalette/ToolChatPage.tsx` - Added thinking UI
 - `src/frontend/types.ts` - Added ChatSSEEvent, isThinking
 
-### 2026-01 - API Discovery Tools
-
-**Lesson learned:** Exposing hundreds of individual tools overwhelms the AI context. Use meta-tools (discover, schema, execute) to let the agent dynamically find what it needs.
+### 2026-01 - API Discovery Tools / Hybrid Tool Discovery (superseded)
 
-**Major change**: Replaced 600+ individual tools with 3 meta-tools.
-
-**What changed**:
-- Added `api_discover`, `api_execute`, `api_schema` tools
-- Created `ApiEndpointIndex` for OpenAPI introspection
-- Hybrid discovery: search + OpenAPI
-- 405 endpoints available via discovery
-
-**Files created**:
-- `lib/api-discovery-tools.ts`
-- `lib/api-endpoint-index.ts`
-
-### 2026-01 - Hybrid Tool Discovery
-
-**Lesson learned:** Neither search-based nor OpenAPI-based discovery alone covers all tools — combine both for comprehensive results.
-
-**What changed**:
-- Combined semantic search with OpenAPI introspection
-- Tools indexed for fulltext search
-- API endpoints indexed from OpenAPI spec
+**Lesson learned:** Exposing hundreds of individual tools overwhelms the AI context — use meta-tools the agent can search. Superseded by Code Mode (2026-02-22); the tools and files these entries described (`api_discover`, `api_schema`, `lib/api-discovery-tools.ts`, `lib/entity-graph-tools.ts`) were deleted in #1876. See git history for the detail.
 
 ### Previous Changes
 

package/dist/modules/ai_assistant/__integration__/TC-AI-MODERATION-008-settings-and-audit.spec.js

@@ -0,0 +1,80 @@
+import { test, expect, request as playwrightRequest } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { getTokenScope, readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+import {
+  deleteAgentOverridesInDb,
+  deleteModerationFlagsInDb,
+  seedModerationFlagInDb
+} from "./helpers/aiAssistantFixtures.js";
+const SETTINGS = "/api/ai_assistant/settings";
+const FLAGS = "/api/ai_assistant/moderation-flags";
+test.describe("TC-AI-MODERATION-008: input moderation settings + audit", () => {
+  test("PUT inputModeration persists per agent and round-trips on/off/inherit", async ({ request }) => {
+    test.slow();
+    const adminToken = await getAuthToken(request, "admin");
+    const { tenantId } = getTokenScope(adminToken);
+    const agentId = "it.moderation_settings";
+    try {
+      const on = await apiRequest(request, "PUT", SETTINGS, {
+        token: adminToken,
+        data: { agentId, inputModeration: true }
+      });
+      expect(on.status(), "PUT inputModeration=true returns 200").toBe(200);
+      expect((await readJsonSafe(on))?.inputModeration).toBe(true);
+      const off = await apiRequest(request, "PUT", SETTINGS, {
+        token: adminToken,
+        data: { agentId, inputModeration: false }
+      });
+      expect(off.status()).toBe(200);
+      expect((await readJsonSafe(off))?.inputModeration).toBe(false);
+      const inherit = await apiRequest(request, "PUT", SETTINGS, {
+        token: adminToken,
+        data: { agentId, inputModeration: null }
+      });
+      expect(inherit.status()).toBe(200);
+      expect((await readJsonSafe(inherit))?.inputModeration).toBeNull();
+    } finally {
+      await deleteAgentOverridesInDb({ tenantId, agentId }).catch(() => void 0);
+    }
+  });
+  test("GET /moderation-flags is tenant-scoped (cross-tenant rows are never returned)", async ({ request }) => {
+    test.slow();
+    const adminToken = await getAuthToken(request, "admin");
+    const { tenantId } = getTokenScope(adminToken);
+    const otherTenantId = "00000000-0000-4000-8000-0000000face7";
+    let mineId = "";
+    try {
+      mineId = await seedModerationFlagInDb({ tenantId, agentId: "it.moderation_audit", userId: "it-user-mine" });
+      await seedModerationFlagInDb({ tenantId: otherTenantId, agentId: "it.moderation_audit", userId: "it-user-other" });
+      const res = await apiRequest(request, "GET", `${FLAGS}?pageSize=100`, { token: adminToken });
+      expect(res.status()).toBe(200);
+      const body = await readJsonSafe(res);
+      expect(body?.items, "returns an items array").toBeTruthy();
+      const ids = (body?.items ?? []).map((row) => row.id);
+      expect(ids, "my tenant flag is visible").toContain(mineId);
+      for (const row of body?.items ?? []) {
+        expect(row.tenantId).toBe(tenantId);
+      }
+    } finally {
+      await deleteModerationFlagsInDb(tenantId).catch(() => void 0);
+      await deleteModerationFlagsInDb(otherTenantId).catch(() => void 0);
+    }
+  });
+  test("GET /moderation-flags RBAC + validation gates", async ({ request, baseURL }) => {
+    const adminToken = await getAuthToken(request, "admin");
+    const tooLarge = await apiRequest(request, "GET", `${FLAGS}?pageSize=101`, { token: adminToken });
+    expect(tooLarge.status()).toBe(400);
+    expect((await readJsonSafe(tooLarge))?.code).toBe("validation_error");
+    const employeeToken = await getAuthToken(request, "employee");
+    const denied = await apiRequest(request, "GET", FLAGS, { token: employeeToken });
+    expect(denied.status(), "employee lacks settings.manage -> 403").toBe(403);
+    const anon = await playwrightRequest.newContext({ baseURL });
+    try {
+      const res = await anon.fetch(FLAGS, { method: "GET" });
+      expect(res.status(), "unauthenticated GET is 401").toBe(401);
+    } finally {
+      await anon.dispose();
+    }
+  });
+});
+//# sourceMappingURL=TC-AI-MODERATION-008-settings-and-audit.spec.js.map

package/dist/modules/ai_assistant/__integration__/TC-AI-MODERATION-008-settings-and-audit.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/__integration__/TC-AI-MODERATION-008-settings-and-audit.spec.ts"],
+  "sourcesContent": ["import { test, expect, request as playwrightRequest } from '@playwright/test';\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api';\nimport { getTokenScope, readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures';\nimport {\n  deleteAgentOverridesInDb,\n  deleteModerationFlagsInDb,\n  seedModerationFlagInDb,\n} from './helpers/aiAssistantFixtures';\n\n/**\n * TC-AI-MODERATION-008 \u2014 Input-moderation settings + audit API.\n * Source: spec `.ai/specs/2026-06-04-ai-input-moderation-and-safety-identifiers.md`.\n *\n * Surfaces under test:\n *   - PUT /api/ai_assistant/settings        (persists `inputModeration` per agent)\n *   - GET /api/ai_assistant/settings        (reflects per-agent effective moderation policy)\n *   - GET /api/ai_assistant/moderation-flags (tenant-scoped audit listing)\n *\n * Contract notes verified against the route handlers:\n *   - PUT `{ agentId, inputModeration }` returns 200 echoing `inputModeration`.\n *   - GET /settings exposes `agents[].moderation = { enforced, override, effective }`.\n *   - GET /moderation-flags returns `{ items, total, page, pageSize }`, tenant-scoped,\n *     gated by `ai_assistant.settings.manage`, `pageSize` capped at 100.\n *\n * Flags are seeded directly in the DB: a real flag is only ever born from the gate\n * during a flagged LLM turn (needs a live moderation call), so seeding keeps the\n * audit + isolation coverage deterministic and provider-free. This spec therefore\n * only runs under the coherent app+DB harness (`yarn test:integration` / `:ephemeral`).\n */\n\nconst SETTINGS = '/api/ai_assistant/settings';\nconst FLAGS = '/api/ai_assistant/moderation-flags';\n\ninterface FlagsResponse {\n  items: Array<{ id: string; tenantId: string; agentId: string; userId: string; categories: Record<string, unknown> }>;\n  total: number;\n  page: number;\n  pageSize: number;\n}\n\ntest.describe('TC-AI-MODERATION-008: input moderation settings + audit', () => {\n  test('PUT inputModeration persists per agent and round-trips on/off/inherit', async ({ request }) => {\n    test.slow();\n    const adminToken = await getAuthToken(request, 'admin');\n    const { tenantId } = getTokenScope(adminToken);\n    // A synthetic agent id keeps the test independent of the (empty-in-CI) live\n    // agent registry; the PUT upserts an override row keyed by this id. The\n    // per-agent `moderation` reflection on GET (registered agents only) is\n    // covered by the route unit tests + the stubbed UI spec (TC-AI-MODERATION-009).\n    const agentId = 'it.moderation_settings';\n\n    try {\n      const on = await apiRequest(request, 'PUT', SETTINGS, {\n        token: adminToken,\n        data: { agentId, inputModeration: true },\n      });\n      expect(on.status(), 'PUT inputModeration=true returns 200').toBe(200);\n      expect((await readJsonSafe<{ inputModeration: boolean | null }>(on))?.inputModeration).toBe(true);\n\n      const off = await apiRequest(request, 'PUT', SETTINGS, {\n        token: adminToken,\n        data: { agentId, inputModeration: false },\n      });\n      expect(off.status()).toBe(200);\n      expect((await readJsonSafe<{ inputModeration: boolean | null }>(off))?.inputModeration).toBe(false);\n\n      const inherit = await apiRequest(request, 'PUT', SETTINGS, {\n        token: adminToken,\n        data: { agentId, inputModeration: null },\n      });\n      expect(inherit.status()).toBe(200);\n      expect((await readJsonSafe<{ inputModeration: boolean | null }>(inherit))?.inputModeration).toBeNull();\n    } finally {\n      await deleteAgentOverridesInDb({ tenantId, agentId }).catch(() => undefined);\n    }\n  });\n\n  test('GET /moderation-flags is tenant-scoped (cross-tenant rows are never returned)', async ({ request }) => {\n    test.slow();\n    const adminToken = await getAuthToken(request, 'admin');\n    const { tenantId } = getTokenScope(adminToken);\n    const otherTenantId = '00000000-0000-4000-8000-0000000face7';\n\n    let mineId = '';\n    try {\n      mineId = await seedModerationFlagInDb({ tenantId, agentId: 'it.moderation_audit', userId: 'it-user-mine' });\n      await seedModerationFlagInDb({ tenantId: otherTenantId, agentId: 'it.moderation_audit', userId: 'it-user-other' });\n\n      const res = await apiRequest(request, 'GET', `${FLAGS}?pageSize=100`, { token: adminToken });\n      expect(res.status()).toBe(200);\n      const body = await readJsonSafe<FlagsResponse>(res);\n      expect(body?.items, 'returns an items array').toBeTruthy();\n      const ids = (body?.items ?? []).map((row) => row.id);\n      expect(ids, 'my tenant flag is visible').toContain(mineId);\n      // Every returned row is scoped to the caller's tenant \u2014 the other-tenant row never leaks.\n      for (const row of body?.items ?? []) {\n        expect(row.tenantId).toBe(tenantId);\n      }\n    } finally {\n      await deleteModerationFlagsInDb(tenantId).catch(() => undefined);\n      await deleteModerationFlagsInDb(otherTenantId).catch(() => undefined);\n    }\n  });\n\n  test('GET /moderation-flags RBAC + validation gates', async ({ request, baseURL }) => {\n    const adminToken = await getAuthToken(request, 'admin');\n\n    // pageSize above the 100 cap is rejected by the zod query schema.\n    const tooLarge = await apiRequest(request, 'GET', `${FLAGS}?pageSize=101`, { token: adminToken });\n    expect(tooLarge.status()).toBe(400);\n    expect((await readJsonSafe<{ code?: string }>(tooLarge))?.code).toBe('validation_error');\n\n    // Employee carries ai_assistant.view but NOT ai_assistant.settings.manage.\n    const employeeToken = await getAuthToken(request, 'employee');\n    const denied = await apiRequest(request, 'GET', FLAGS, { token: employeeToken });\n    expect(denied.status(), 'employee lacks settings.manage -> 403').toBe(403);\n\n    const anon = await playwrightRequest.newContext({ baseURL });\n    try {\n      const res = await anon.fetch(FLAGS, { method: 'GET' });\n      expect(res.status(), 'unauthenticated GET is 401').toBe(401);\n    } finally {\n      await anon.dispose();\n    }\n  });\n});\n"],
+  "mappings": "AAAA,SAAS,MAAM,QAAQ,WAAW,yBAAyB;AAC3D,SAAS,YAAY,oBAAoB;AACzC,SAAS,eAAe,oBAAoB;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAuBP,MAAM,WAAW;AACjB,MAAM,QAAQ;AASd,KAAK,SAAS,2DAA2D,MAAM;AAC7E,OAAK,yEAAyE,OAAO,EAAE,QAAQ,MAAM;AACnG,SAAK,KAAK;AACV,UAAM,aAAa,MAAM,aAAa,SAAS,OAAO;AACtD,UAAM,EAAE,SAAS,IAAI,cAAc,UAAU;AAK7C,UAAM,UAAU;AAEhB,QAAI;AACF,YAAM,KAAK,MAAM,WAAW,SAAS,OAAO,UAAU;AAAA,QACpD,OAAO;AAAA,QACP,MAAM,EAAE,SAAS,iBAAiB,KAAK;AAAA,MACzC,CAAC;AACD,aAAO,GAAG,OAAO,GAAG,sCAAsC,EAAE,KAAK,GAAG;AACpE,cAAQ,MAAM,aAAkD,EAAE,IAAI,eAAe,EAAE,KAAK,IAAI;AAEhG,YAAM,MAAM,MAAM,WAAW,SAAS,OAAO,UAAU;AAAA,QACrD,OAAO;AAAA,QACP,MAAM,EAAE,SAAS,iBAAiB,MAAM;AAAA,MAC1C,CAAC;AACD,aAAO,IAAI,OAAO,CAAC,EAAE,KAAK,GAAG;AAC7B,cAAQ,MAAM,aAAkD,GAAG,IAAI,eAAe,EAAE,KAAK,KAAK;AAElG,YAAM,UAAU,MAAM,WAAW,SAAS,OAAO,UAAU;AAAA,QACzD,OAAO;AAAA,QACP,MAAM,EAAE,SAAS,iBAAiB,KAAK;AAAA,MACzC,CAAC;AACD,aAAO,QAAQ,OAAO,CAAC,EAAE,KAAK,GAAG;AACjC,cAAQ,MAAM,aAAkD,OAAO,IAAI,eAAe,EAAE,SAAS;AAAA,IACvG,UAAE;AACA,YAAM,yBAAyB,EAAE,UAAU,QAAQ,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC7E;AAAA,EACF,CAAC;AAED,OAAK,iFAAiF,OAAO,EAAE,QAAQ,MAAM;AAC3G,SAAK,KAAK;AACV,UAAM,aAAa,MAAM,aAAa,SAAS,OAAO;AACtD,UAAM,EAAE,SAAS,IAAI,cAAc,UAAU;AAC7C,UAAM,gBAAgB;AAEtB,QAAI,SAAS;AACb,QAAI;AACF,eAAS,MAAM,uBAAuB,EAAE,UAAU,SAAS,uBAAuB,QAAQ,eAAe,CAAC;AAC1G,YAAM,uBAAuB,EAAE,UAAU,eAAe,SAAS,uBAAuB,QAAQ,gBAAgB,CAAC;AAEjH,YAAM,MAAM,MAAM,WAAW,SAAS,OAAO,GAAG,KAAK,iBAAiB,EAAE,OAAO,WAAW,CAAC;AAC3F,aAAO,IAAI,OAAO,CAAC,EAAE,KAAK,GAAG;AAC7B,YAAM,OAAO,MAAM,aAA4B,GAAG;AAClD,aAAO,MAAM,OAAO,wBAAwB,EAAE,WAAW;AACzD,YAAM,OAAO,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE;AACnD,aAAO,KAAK,2BAA2B,EAAE,UAAU,MAAM;AAEzD,iBAAW,OAAO,MAAM,SAAS,CAAC,GAAG;AACnC,eAAO,IAAI,QAAQ,EAAE,KAAK,QAAQ;AAAA,MACpC;AAAA,IACF,UAAE;AACA,YAAM,0BAA0B,QAAQ,EAAE,MAAM,MAAM,MAAS;AAC/D,YAAM,0BAA0B,aAAa,EAAE,MAAM,MAAM,MAAS;AAAA,IACtE;AAAA,EACF,CAAC;AAED,OAAK,iDAAiD,OAAO,EAAE,SAAS,QAAQ,MAAM;AACpF,UAAM,aAAa,MAAM,aAAa,SAAS,OAAO;AAGtD,UAAM,WAAW,MAAM,WAAW,SAAS,OAAO,GAAG,KAAK,iBAAiB,EAAE,OAAO,WAAW,CAAC;AAChG,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,YAAQ,MAAM,aAAgC,QAAQ,IAAI,IAAI,EAAE,KAAK,kBAAkB;AAGvF,UAAM,gBAAgB,MAAM,aAAa,SAAS,UAAU;AAC5D,UAAM,SAAS,MAAM,WAAW,SAAS,OAAO,OAAO,EAAE,OAAO,cAAc,CAAC;AAC/E,WAAO,OAAO,OAAO,GAAG,uCAAuC,EAAE,KAAK,GAAG;AAEzE,UAAM,OAAO,MAAM,kBAAkB,WAAW,EAAE,QAAQ,CAAC;AAC3D,QAAI;AACF,YAAM,MAAM,MAAM,KAAK,MAAM,OAAO,EAAE,QAAQ,MAAM,CAAC;AACrD,aAAO,IAAI,OAAO,GAAG,4BAA4B,EAAE,KAAK,GAAG;AAAA,IAC7D,UAAE;AACA,YAAM,KAAK,QAAQ;AAAA,IACrB;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/ai_assistant/__integration__/TC-AI-MODERATION-009-ui.spec.js

@@ -0,0 +1,124 @@
+import { test, expect } from "@playwright/test";
+import { login } from "@open-mercato/core/modules/core/__integration__/helpers/auth";
+const FLAGS_PAGE = "/backend/config/ai-assistant/moderation-flags";
+const AGENTS_PAGE = "/backend/config/ai-assistant/agents";
+test.describe("TC-AI-MODERATION-009: moderation UI surfaces", () => {
+  test("audit page renders a flagged row with its category badge", async ({ page }) => {
+    await login(page, "superadmin");
+    await page.route("**/api/ai_assistant/moderation-flags**", async (route) => {
+      await route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({
+          items: [
+            {
+              id: "flag-it-1",
+              tenantId: "t-1",
+              organizationId: null,
+              agentId: "support.portal_assistant",
+              userId: "hashed-user-it",
+              providerId: "openai",
+              modelId: "gpt-5-mini",
+              categories: { hate: { flagged: true, score: 0.97 }, violence: { flagged: false, score: 0.01 } },
+              createdAt: "2026-06-10T12:00:00.000Z"
+            }
+          ],
+          total: 1,
+          page: 1,
+          pageSize: 50
+        })
+      });
+    });
+    await page.goto(FLAGS_PAGE, { waitUntil: "domcontentloaded" });
+    await expect(page.getByText("support.portal_assistant").first()).toBeVisible({ timeout: 2e4 });
+    await expect(page.getByText("hashed-user-it").first()).toBeVisible();
+    await expect(page.getByText("hate", { exact: true }).first()).toBeVisible();
+    await expect(page.getByText("violence", { exact: true })).toHaveCount(0);
+  });
+  test("audit page renders the empty state when there are no flags", async ({ page }) => {
+    await login(page, "superadmin");
+    await page.route("**/api/ai_assistant/moderation-flags**", async (route) => {
+      await route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ items: [], total: 0, page: 1, pageSize: 50 })
+      });
+    });
+    await page.goto(FLAGS_PAGE, { waitUntil: "domcontentloaded" });
+    await expect(page.getByText(/No flagged messages/i).first()).toBeVisible({ timeout: 2e4 });
+  });
+  test("audit page redirects an unauthenticated visit to login", async ({ browser }) => {
+    const context = await browser.newContext();
+    const page = await context.newPage();
+    try {
+      await page.goto(FLAGS_PAGE, { waitUntil: "domcontentloaded" });
+      await page.waitForURL(/\/login/, { timeout: 15e3 });
+      expect(page.url()).toMatch(/\/login/);
+    } finally {
+      await context.close();
+    }
+  });
+  test("agent settings renders the input-moderation section (enforced badge for untrusted agents)", async ({
+    page
+  }) => {
+    await login(page, "superadmin");
+    const agent = {
+      id: "support.portal_assistant",
+      moduleId: "support",
+      label: "Portal assistant",
+      description: "Customer-facing support assistant.",
+      executionMode: "chat",
+      readOnly: true,
+      mutationPolicy: "read-only",
+      untrustedInput: true,
+      allowedTools: [],
+      acceptedMediaTypes: [],
+      tools: []
+    };
+    await page.route("**/api/ai_assistant/ai/agents", async (route) => {
+      await route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ agents: [agent], total: 1 })
+      });
+    });
+    await page.route("**/api/ai_assistant/settings", async (route) => {
+      await route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({
+          availableProviders: [],
+          agents: [
+            {
+              agentId: agent.id,
+              moduleId: agent.moduleId,
+              allowRuntimeModelOverride: true,
+              codeDefaultProviderId: null,
+              codeDefaultModelId: null,
+              override: null,
+              runtimeOverrideAllowlist: {
+                env: null,
+                tenant: null,
+                effective: { providers: null, modelsByProvider: {}, hasRestrictions: false, tenantOverridesActive: false },
+                envVarNames: { providers: "X", modelsByProvider: {} }
+              },
+              providerId: "openai",
+              modelId: "gpt-5-mini",
+              baseURL: null,
+              source: "provider_default",
+              moderation: { enforced: true, override: null, effective: "enforced" }
+            }
+          ]
+        })
+      });
+    });
+    await page.goto(AGENTS_PAGE, { waitUntil: "domcontentloaded" });
+    const moderationSection = page.locator("[data-ai-agent-moderation]");
+    const settingsContainer = page.locator("[data-ai-agent-settings]");
+    await expect(moderationSection.or(settingsContainer).first()).toBeVisible({ timeout: 2e4 });
+    if (await moderationSection.first().isVisible().catch(() => false)) {
+      await expect(page.locator("[data-ai-agent-moderation-enforced]").first()).toBeVisible();
+    }
+  });
+});
+//# sourceMappingURL=TC-AI-MODERATION-009-ui.spec.js.map

package/dist/modules/ai_assistant/__integration__/TC-AI-MODERATION-009-ui.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/__integration__/TC-AI-MODERATION-009-ui.spec.ts"],
+  "sourcesContent": ["import { test, expect } from '@playwright/test';\nimport { login } from '@open-mercato/core/modules/core/__integration__/helpers/auth';\n\n/**\n * TC-AI-MODERATION-009 \u2014 Moderation UI surfaces (Playwright).\n * Source: spec `.ai/specs/2026-06-04-ai-input-moderation-and-safety-identifiers.md`.\n *\n * Covers the two new backend UI surfaces deterministically by stubbing the\n * data routes (the page chrome + components render regardless of the live\n * registry / DB):\n *   - `/backend/config/ai-assistant/moderation-flags` \u2014 audit DataTable.\n *   - `/backend/config/ai-assistant/agents` \u2014 per-agent moderation section.\n *\n * The chat enforced\u2192rejection and chat-off\u2192passthrough flows are intentionally\n * NOT exercised here: the moderation gate runs SERVER-SIDE inside\n * `runAiAgentText`, so `page.route()` cannot stub it, and a live-provider e2e\n * would be non-deterministic (it needs a real OpenAI key + model behavior),\n * which `.ai/qa/AGENTS.md` forbids. Those branches are covered deterministically\n * by the gate unit tests (`input-moderation-gate.test.ts`), the moderation\n * service tests, and the `<AiChat>` `moderation_blocked` render test.\n */\n\nconst FLAGS_PAGE = '/backend/config/ai-assistant/moderation-flags';\nconst AGENTS_PAGE = '/backend/config/ai-assistant/agents';\n\ntest.describe('TC-AI-MODERATION-009: moderation UI surfaces', () => {\n  test('audit page renders a flagged row with its category badge', async ({ page }) => {\n    await login(page, 'superadmin');\n\n    await page.route('**/api/ai_assistant/moderation-flags**', async (route) => {\n      await route.fulfill({\n        status: 200,\n        contentType: 'application/json',\n        body: JSON.stringify({\n          items: [\n            {\n              id: 'flag-it-1',\n              tenantId: 't-1',\n              organizationId: null,\n              agentId: 'support.portal_assistant',\n              userId: 'hashed-user-it',\n              providerId: 'openai',\n              modelId: 'gpt-5-mini',\n              categories: { hate: { flagged: true, score: 0.97 }, violence: { flagged: false, score: 0.01 } },\n              createdAt: '2026-06-10T12:00:00.000Z',\n            },\n          ],\n          total: 1,\n          page: 1,\n          pageSize: 50,\n        }),\n      });\n    });\n\n    await page.goto(FLAGS_PAGE, { waitUntil: 'domcontentloaded' });\n\n    await expect(page.getByText('support.portal_assistant').first()).toBeVisible({ timeout: 20_000 });\n    await expect(page.getByText('hashed-user-it').first()).toBeVisible();\n    // Only the flagged category renders as a badge; the non-flagged one is omitted.\n    await expect(page.getByText('hate', { exact: true }).first()).toBeVisible();\n    await expect(page.getByText('violence', { exact: true })).toHaveCount(0);\n  });\n\n  test('audit page renders the empty state when there are no flags', async ({ page }) => {\n    await login(page, 'superadmin');\n\n    await page.route('**/api/ai_assistant/moderation-flags**', async (route) => {\n      await route.fulfill({\n        status: 200,\n        contentType: 'application/json',\n        body: JSON.stringify({ items: [], total: 0, page: 1, pageSize: 50 }),\n      });\n    });\n\n    await page.goto(FLAGS_PAGE, { waitUntil: 'domcontentloaded' });\n    await expect(page.getByText(/No flagged messages/i).first()).toBeVisible({ timeout: 20_000 });\n  });\n\n  test('audit page redirects an unauthenticated visit to login', async ({ browser }) => {\n    const context = await browser.newContext();\n    const page = await context.newPage();\n    try {\n      await page.goto(FLAGS_PAGE, { waitUntil: 'domcontentloaded' });\n      await page.waitForURL(/\\/login/, { timeout: 15_000 });\n      expect(page.url()).toMatch(/\\/login/);\n    } finally {\n      await context.close();\n    }\n  });\n\n  test('agent settings renders the input-moderation section (enforced badge for untrusted agents)', async ({\n    page,\n  }) => {\n    await login(page, 'superadmin');\n\n    const agent = {\n      id: 'support.portal_assistant',\n      moduleId: 'support',\n      label: 'Portal assistant',\n      description: 'Customer-facing support assistant.',\n      executionMode: 'chat',\n      readOnly: true,\n      mutationPolicy: 'read-only',\n      untrustedInput: true,\n      allowedTools: [],\n      acceptedMediaTypes: [],\n      tools: [],\n    };\n\n    await page.route('**/api/ai_assistant/ai/agents', async (route) => {\n      await route.fulfill({\n        status: 200,\n        contentType: 'application/json',\n        body: JSON.stringify({ agents: [agent], total: 1 }),\n      });\n    });\n    await page.route('**/api/ai_assistant/settings', async (route) => {\n      await route.fulfill({\n        status: 200,\n        contentType: 'application/json',\n        body: JSON.stringify({\n          availableProviders: [],\n          agents: [\n            {\n              agentId: agent.id,\n              moduleId: agent.moduleId,\n              allowRuntimeModelOverride: true,\n              codeDefaultProviderId: null,\n              codeDefaultModelId: null,\n              override: null,\n              runtimeOverrideAllowlist: {\n                env: null,\n                tenant: null,\n                effective: { providers: null, modelsByProvider: {}, hasRestrictions: false, tenantOverridesActive: false },\n                envVarNames: { providers: 'X', modelsByProvider: {} },\n              },\n              providerId: 'openai',\n              modelId: 'gpt-5-mini',\n              baseURL: null,\n              source: 'provider_default',\n              moderation: { enforced: true, override: null, effective: 'enforced' },\n            },\n          ],\n        }),\n      });\n    });\n\n    await page.goto(AGENTS_PAGE, { waitUntil: 'domcontentloaded' });\n\n    const moderationSection = page.locator('[data-ai-agent-moderation]');\n    const settingsContainer = page.locator('[data-ai-agent-settings]');\n    // Either the moderation section rendered (registry+detail loaded from the stub)\n    // or at least the settings page chrome loaded \u2014 never a hard failure.\n    await expect(moderationSection.or(settingsContainer).first()).toBeVisible({ timeout: 20_000 });\n\n    if (await moderationSection.first().isVisible().catch(() => false)) {\n      // The untrustedInput agent renders the non-editable Enforced badge.\n      await expect(page.locator('[data-ai-agent-moderation-enforced]').first()).toBeVisible();\n    }\n  });\n});\n"],
+  "mappings": "AAAA,SAAS,MAAM,cAAc;AAC7B,SAAS,aAAa;AAqBtB,MAAM,aAAa;AACnB,MAAM,cAAc;AAEpB,KAAK,SAAS,gDAAgD,MAAM;AAClE,OAAK,4DAA4D,OAAO,EAAE,KAAK,MAAM;AACnF,UAAM,MAAM,MAAM,YAAY;AAE9B,UAAM,KAAK,MAAM,0CAA0C,OAAO,UAAU;AAC1E,YAAM,MAAM,QAAQ;AAAA,QAClB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,MAAM,KAAK,UAAU;AAAA,UACnB,OAAO;AAAA,YACL;AAAA,cACE,IAAI;AAAA,cACJ,UAAU;AAAA,cACV,gBAAgB;AAAA,cAChB,SAAS;AAAA,cACT,QAAQ;AAAA,cACR,YAAY;AAAA,cACZ,SAAS;AAAA,cACT,YAAY,EAAE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,GAAG,UAAU,EAAE,SAAS,OAAO,OAAO,KAAK,EAAE;AAAA,cAC9F,WAAW;AAAA,YACb;AAAA,UACF;AAAA,UACA,OAAO;AAAA,UACP,MAAM;AAAA,UACN,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAED,UAAM,KAAK,KAAK,YAAY,EAAE,WAAW,mBAAmB,CAAC;AAE7D,UAAM,OAAO,KAAK,UAAU,0BAA0B,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,SAAS,IAAO,CAAC;AAChG,UAAM,OAAO,KAAK,UAAU,gBAAgB,EAAE,MAAM,CAAC,EAAE,YAAY;AAEnE,UAAM,OAAO,KAAK,UAAU,QAAQ,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY;AAC1E,UAAM,OAAO,KAAK,UAAU,YAAY,EAAE,OAAO,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;AAAA,EACzE,CAAC;AAED,OAAK,8DAA8D,OAAO,EAAE,KAAK,MAAM;AACrF,UAAM,MAAM,MAAM,YAAY;AAE9B,UAAM,KAAK,MAAM,0CAA0C,OAAO,UAAU;AAC1E,YAAM,MAAM,QAAQ;AAAA,QAClB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,CAAC;AAAA,MACrE,CAAC;AAAA,IACH,CAAC;AAED,UAAM,KAAK,KAAK,YAAY,EAAE,WAAW,mBAAmB,CAAC;AAC7D,UAAM,OAAO,KAAK,UAAU,sBAAsB,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,SAAS,IAAO,CAAC;AAAA,EAC9F,CAAC;AAED,OAAK,0DAA0D,OAAO,EAAE,QAAQ,MAAM;AACpF,UAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,UAAM,OAAO,MAAM,QAAQ,QAAQ;AACnC,QAAI;AACF,YAAM,KAAK,KAAK,YAAY,EAAE,WAAW,mBAAmB,CAAC;AAC7D,YAAM,KAAK,WAAW,WAAW,EAAE,SAAS,KAAO,CAAC;AACpD,aAAO,KAAK,IAAI,CAAC,EAAE,QAAQ,SAAS;AAAA,IACtC,UAAE;AACA,YAAM,QAAQ,MAAM;AAAA,IACtB;AAAA,EACF,CAAC;AAED,OAAK,6FAA6F,OAAO;AAAA,IACvG;AAAA,EACF,MAAM;AACJ,UAAM,MAAM,MAAM,YAAY;AAE9B,UAAM,QAAQ;AAAA,MACZ,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,OAAO;AAAA,MACP,aAAa;AAAA,MACb,eAAe;AAAA,MACf,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,MAChB,cAAc,CAAC;AAAA,MACf,oBAAoB,CAAC;AAAA,MACrB,OAAO,CAAC;AAAA,IACV;AAEA,UAAM,KAAK,MAAM,iCAAiC,OAAO,UAAU;AACjE,YAAM,MAAM,QAAQ;AAAA,QAClB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC;AAAA,MACpD,CAAC;AAAA,IACH,CAAC;AACD,UAAM,KAAK,MAAM,gCAAgC,OAAO,UAAU;AAChE,YAAM,MAAM,QAAQ;AAAA,QAClB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,MAAM,KAAK,UAAU;AAAA,UACnB,oBAAoB,CAAC;AAAA,UACrB,QAAQ;AAAA,YACN;AAAA,cACE,SAAS,MAAM;AAAA,cACf,UAAU,MAAM;AAAA,cAChB,2BAA2B;AAAA,cAC3B,uBAAuB;AAAA,cACvB,oBAAoB;AAAA,cACpB,UAAU;AAAA,cACV,0BAA0B;AAAA,gBACxB,KAAK;AAAA,gBACL,QAAQ;AAAA,gBACR,WAAW,EAAE,WAAW,MAAM,kBAAkB,CAAC,GAAG,iBAAiB,OAAO,uBAAuB,MAAM;AAAA,gBACzG,aAAa,EAAE,WAAW,KAAK,kBAAkB,CAAC,EAAE;AAAA,cACtD;AAAA,cACA,YAAY;AAAA,cACZ,SAAS;AAAA,cACT,SAAS;AAAA,cACT,QAAQ;AAAA,cACR,YAAY,EAAE,UAAU,MAAM,UAAU,MAAM,WAAW,WAAW;AAAA,YACtE;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAED,UAAM,KAAK,KAAK,aAAa,EAAE,WAAW,mBAAmB,CAAC;AAE9D,UAAM,oBAAoB,KAAK,QAAQ,4BAA4B;AACnE,UAAM,oBAAoB,KAAK,QAAQ,0BAA0B;AAGjE,UAAM,OAAO,kBAAkB,GAAG,iBAAiB,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,SAAS,IAAO,CAAC;AAE7F,QAAI,MAAM,kBAAkB,MAAM,EAAE,UAAU,EAAE,MAAM,MAAM,KAAK,GAAG;AAElE,YAAM,OAAO,KAAK,QAAQ,qCAAqC,EAAE,MAAM,CAAC,EAAE,YAAY;AAAA,IACxF;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/ai_assistant/__integration__/helpers/aiAssistantFixtures.js

@@ -100,6 +100,34 @@ async function deleteTenantAllowlistInDb(tenantId) {
     await client.query("delete from ai_tenant_model_allowlists where tenant_id = $1", [tenantId]);
   });
 }
+async function seedModerationFlagInDb(input) {
+  const categories = JSON.stringify(input.categories ?? { hate: { flagged: true, score: 0.97 } });
+  return withClient(async (client) => {
+    const result = await client.query(
+      `insert into ai_moderation_flags
+         (id, tenant_id, organization_id, agent_id, user_id, provider_id, model_id, categories, created_at)
+       values
+         (gen_random_uuid(), $1, $2, $3, $4, $5, $6, $7::jsonb, now())
+       returning id`,
+      [
+        input.tenantId,
+        input.organizationId ?? null,
+        input.agentId ?? "it_agent.moderation_fixture",
+        input.userId ?? `it-user-${randomUUID()}`,
+        input.providerId ?? "openai",
+        input.modelId ?? "gpt-5-mini",
+        categories
+      ]
+    );
+    return result.rows[0].id;
+  });
+}
+async function deleteModerationFlagsInDb(tenantId) {
+  if (!tenantId) return;
+  await withClient(async (client) => {
+    await client.query("delete from ai_moderation_flags where tenant_id = $1", [tenantId]);
+  });
+}
 async function deleteConversationCascadeInDb(input) {
   if (!input.tenantId || !input.conversationId) return;
   await withClient(async (client) => {
@@ -120,8 +148,10 @@ async function deleteConversationCascadeInDb(input) {
 export {
   deleteAgentOverridesInDb,
   deleteConversationCascadeInDb,
+  deleteModerationFlagsInDb,
   deletePendingActionInDb,
   deleteTenantAllowlistInDb,
+  seedModerationFlagInDb,
   seedPendingActionInDb
 };
 //# sourceMappingURL=aiAssistantFixtures.js.map

package/dist/modules/ai_assistant/__integration__/helpers/aiAssistantFixtures.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/ai_assistant/__integration__/helpers/aiAssistantFixtures.ts"],
-  "sourcesContent": ["import { readFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\nimport path from 'node:path';\nimport { Client } from 'pg';\n\n/**\n * Direct-Postgres fixtures for AI Assistant integration specs.\n *\n * Mirrors the sanctioned pattern in\n * `@open-mercato/core/helpers/integration/dbFixtures` (raw SQL against\n * `DATABASE_URL`) for the surfaces that have NO public create route:\n *  - `ai_pending_actions`: a pending mutation approval is only ever born from\n *    the internal `prepareMutation` path during a real LLM agent turn. Seeding\n *    the row directly keeps confirm/cancel/GET coverage deterministic and\n *    provider-free.\n *  - prompt overrides: the `prompt-override` route exposes no DELETE, so\n *    versioned rows must be swept via SQL after a test.\n *\n * The app server and this helper MUST share one `DATABASE_URL`, so specs using\n * these helpers only run under the coherent app+DB harness\n * (`yarn test:integration` / `:ephemeral`), never against an arbitrary dev\n * server whose `DATABASE_URL` differs from `apps/mercato/.env`.\n */\n\nfunction resolveAppRoot(): string {\n  const fromEnv = process.env.OM_TEST_APP_ROOT?.trim();\n  return fromEnv ? path.resolve(fromEnv) : path.resolve(process.cwd(), 'apps/mercato');\n}\n\nfunction readEnvValue(key: string): string | undefined {\n  if (process.env[key]) return process.env[key];\n  const candidatePaths = [\n    path.resolve(resolveAppRoot(), '.env'),\n    path.resolve(process.cwd(), 'apps/mercato/.env'),\n    path.resolve(process.cwd(), '.env'),\n  ];\n  for (const envPath of candidatePaths) {\n    try {\n      const content = readFileSync(envPath, 'utf-8');\n      const match = content.match(new RegExp(`^${key}=(.+)$`, 'm'));\n      if (match?.[1]) return match[1].trim();\n    } catch {\n      continue;\n    }\n  }\n  return undefined;\n}\n\nfunction resolveDatabaseUrl(): string {\n  const url = readEnvValue('DATABASE_URL');\n  if (!url) throw new Error('[internal] DATABASE_URL is not configured for AI Assistant integration DB fixtures');\n  return url;\n}\n\nasync function withClient<T>(run: (client: Client) => Promise<T>): Promise<T> {\n  const client = new Client({ connectionString: resolveDatabaseUrl() });\n  await client.connect();\n  try {\n    return await run(client);\n  } finally {\n    await client.end();\n  }\n}\n\nexport type SeededPendingActionStatus =\n  | 'pending'\n  | 'confirmed'\n  | 'cancelled'\n  | 'expired'\n  | 'executing'\n  | 'failed';\n\nexport interface SeedPendingActionInput {\n  tenantId: string;\n  organizationId?: string | null;\n  createdByUserId: string;\n  status?: SeededPendingActionStatus;\n  agentId?: string;\n  toolName?: string;\n  /** Minutes from now until expiry. Negative => the row is already expired. */\n  expiresInMinutes?: number;\n  normalizedInput?: Record<string, unknown>;\n  executionResult?: Record<string, unknown> | null;\n  idempotencyKey?: string;\n}\n\nexport interface SeededPendingAction {\n  id: string;\n  idempotencyKey: string;\n}\n\n/**\n * Inserts an `ai_pending_actions` row directly. Returns the new id so the test\n * can act on it and clean it up. Defaults produce an actionable `pending` row\n * with a future TTL; override `status`/`expiresInMinutes`/`executionResult` to\n * cover the idempotency short-circuit and 409 error branches.\n */\nexport async function seedPendingActionInDb(input: SeedPendingActionInput): Promise<SeededPendingAction> {\n  const idempotencyKey = input.idempotencyKey ?? `it-pending-${randomUUID()}`;\n  const status = input.status ?? 'pending';\n  const expiresInMinutes = input.expiresInMinutes ?? 60;\n  const normalizedInput = JSON.stringify(input.normalizedInput ?? {});\n  const executionResult =\n    input.executionResult === undefined || input.executionResult === null\n      ? null\n      : JSON.stringify(input.executionResult);\n  return withClient(async (client) => {\n    const result = await client.query<{ id: string }>(\n      `insert into ai_pending_actions\n         (id, tenant_id, organization_id, agent_id, tool_name, normalized_input,\n          field_diff, attachment_ids, idempotency_key, created_by_user_id, status,\n          queue_mode, execution_result, created_at, expires_at)\n       values\n         (gen_random_uuid(), $1, $2, $3, $4, $5::jsonb,\n          '[]'::jsonb, '[]'::jsonb, $6, $7, $8,\n          'inline', $9::jsonb, now(), now() + make_interval(mins => $10::int))\n       returning id`,\n      [\n        input.tenantId,\n        input.organizationId ?? null,\n        input.agentId ?? 'it_agent.pending_fixture',\n        input.toolName ?? 'it_tool.noop',\n        normalizedInput,\n        idempotencyKey,\n        input.createdByUserId,\n        status,\n        executionResult,\n        expiresInMinutes,\n      ],\n    );\n    return { id: result.rows[0].id, idempotencyKey };\n  });\n}\n\n/** Hard-deletes a seeded pending action row (best-effort test cleanup). */\nexport async function deletePendingActionInDb(id: string | null): Promise<void> {\n  if (!id) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_pending_actions where id = $1', [id]);\n  });\n}\n\n/**\n * Sweeps every per-agent override row for a tenant across the three override\n * tables. Required for `prompt-override` cleanup (no DELETE route) and used as a\n * belt-and-braces teardown for mutation-policy / loop overrides.\n */\nexport async function deleteAgentOverridesInDb(input: { tenantId: string; agentId: string }): Promise<void> {\n  if (!input.tenantId || !input.agentId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_agent_prompt_overrides where tenant_id = $1 and agent_id = $2', [\n      input.tenantId,\n      input.agentId,\n    ]);\n    await client.query('delete from ai_agent_mutation_policy_overrides where tenant_id = $1 and agent_id = $2', [\n      input.tenantId,\n      input.agentId,\n    ]);\n    await client.query('delete from ai_agent_runtime_overrides where tenant_id = $1 and agent_id = $2', [\n      input.tenantId,\n      input.agentId,\n    ]);\n  });\n}\n\n/** Hard-deletes any tenant model-allowlist rows (best-effort cleanup). */\nexport async function deleteTenantAllowlistInDb(tenantId: string | null): Promise<void> {\n  if (!tenantId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_tenant_model_allowlists where tenant_id = $1', [tenantId]);\n  });\n}\n\n/**\n * Hard-deletes a conversation and its participant + message rows by the\n * client-facing `conversation_id`. The DELETE route only soft-deletes, so this\n * gives specs a true teardown for the rows they created.\n */\nexport async function deleteConversationCascadeInDb(input: {\n  tenantId: string;\n  conversationId: string;\n}): Promise<void> {\n  if (!input.tenantId || !input.conversationId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_chat_messages where tenant_id = $1 and conversation_id = $2', [\n      input.tenantId,\n      input.conversationId,\n    ]);\n    await client.query(\n      'delete from ai_chat_conversation_participants where tenant_id = $1 and conversation_id = $2',\n      [input.tenantId, input.conversationId],\n    );\n    await client.query('delete from ai_chat_conversations where tenant_id = $1 and conversation_id = $2', [\n      input.tenantId,\n      input.conversationId,\n    ]);\n  });\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,cAAc;AAqBvB,SAAS,iBAAyB;AAChC,QAAM,UAAU,QAAQ,IAAI,kBAAkB,KAAK;AACnD,SAAO,UAAU,KAAK,QAAQ,OAAO,IAAI,KAAK,QAAQ,QAAQ,IAAI,GAAG,cAAc;AACrF;AAEA,SAAS,aAAa,KAAiC;AACrD,MAAI,QAAQ,IAAI,GAAG,EAAG,QAAO,QAAQ,IAAI,GAAG;AAC5C,QAAM,iBAAiB;AAAA,IACrB,KAAK,QAAQ,eAAe,GAAG,MAAM;AAAA,IACrC,KAAK,QAAQ,QAAQ,IAAI,GAAG,mBAAmB;AAAA,IAC/C,KAAK,QAAQ,QAAQ,IAAI,GAAG,MAAM;AAAA,EACpC;AACA,aAAW,WAAW,gBAAgB;AACpC,QAAI;AACF,YAAM,UAAU,aAAa,SAAS,OAAO;AAC7C,YAAM,QAAQ,QAAQ,MAAM,IAAI,OAAO,IAAI,GAAG,UAAU,GAAG,CAAC;AAC5D,UAAI,QAAQ,CAAC,EAAG,QAAO,MAAM,CAAC,EAAE,KAAK;AAAA,IACvC,QAAQ;AACN;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBAA6B;AACpC,QAAM,MAAM,aAAa,cAAc;AACvC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,oFAAoF;AAC9G,SAAO;AACT;AAEA,eAAe,WAAc,KAAiD;AAC5E,QAAM,SAAS,IAAI,OAAO,EAAE,kBAAkB,mBAAmB,EAAE,CAAC;AACpE,QAAM,OAAO,QAAQ;AACrB,MAAI;AACF,WAAO,MAAM,IAAI,MAAM;AAAA,EACzB,UAAE;AACA,UAAM,OAAO,IAAI;AAAA,EACnB;AACF;AAmCA,eAAsB,sBAAsB,OAA6D;AACvG,QAAM,iBAAiB,MAAM,kBAAkB,cAAc,WAAW,CAAC;AACzE,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,mBAAmB,MAAM,oBAAoB;AACnD,QAAM,kBAAkB,KAAK,UAAU,MAAM,mBAAmB,CAAC,CAAC;AAClE,QAAM,kBACJ,MAAM,oBAAoB,UAAa,MAAM,oBAAoB,OAC7D,OACA,KAAK,UAAU,MAAM,eAAe;AAC1C,SAAO,WAAW,OAAO,WAAW;AAClC,UAAM,SAAS,MAAM,OAAO;AAAA,MAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA;AAAA,QACE,MAAM;AAAA,QACN,MAAM,kBAAkB;AAAA,QACxB,MAAM,WAAW;AAAA,QACjB,MAAM,YAAY;AAAA,QAClB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,IAAI,eAAe;AAAA,EACjD,CAAC;AACH;AAGA,eAAsB,wBAAwB,IAAkC;AAC9E,MAAI,CAAC,GAAI;AACT,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,gDAAgD,CAAC,EAAE,CAAC;AAAA,EACzE,CAAC;AACH;AAOA,eAAsB,yBAAyB,OAA6D;AAC1G,MAAI,CAAC,MAAM,YAAY,CAAC,MAAM,QAAS;AACvC,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,gFAAgF;AAAA,MACjG,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AACD,UAAM,OAAO,MAAM,yFAAyF;AAAA,MAC1G,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AACD,UAAM,OAAO,MAAM,iFAAiF;AAAA,MAClG,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,EACH,CAAC;AACH;AAGA,eAAsB,0BAA0B,UAAwC;AACtF,MAAI,CAAC,SAAU;AACf,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,+DAA+D,CAAC,QAAQ,CAAC;AAAA,EAC9F,CAAC;AACH;AAOA,eAAsB,8BAA8B,OAGlC;AAChB,MAAI,CAAC,MAAM,YAAY,CAAC,MAAM,eAAgB;AAC9C,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,8EAA8E;AAAA,MAC/F,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AACD,UAAM,OAAO;AAAA,MACX;AAAA,MACA,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,IACvC;AACA,UAAM,OAAO,MAAM,mFAAmF;AAAA,MACpG,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,EACH,CAAC;AACH;",
+  "sourcesContent": ["import { readFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\nimport path from 'node:path';\nimport { Client } from 'pg';\n\n/**\n * Direct-Postgres fixtures for AI Assistant integration specs.\n *\n * Mirrors the sanctioned pattern in\n * `@open-mercato/core/helpers/integration/dbFixtures` (raw SQL against\n * `DATABASE_URL`) for the surfaces that have NO public create route:\n *  - `ai_pending_actions`: a pending mutation approval is only ever born from\n *    the internal `prepareMutation` path during a real LLM agent turn. Seeding\n *    the row directly keeps confirm/cancel/GET coverage deterministic and\n *    provider-free.\n *  - prompt overrides: the `prompt-override` route exposes no DELETE, so\n *    versioned rows must be swept via SQL after a test.\n *\n * The app server and this helper MUST share one `DATABASE_URL`, so specs using\n * these helpers only run under the coherent app+DB harness\n * (`yarn test:integration` / `:ephemeral`), never against an arbitrary dev\n * server whose `DATABASE_URL` differs from `apps/mercato/.env`.\n */\n\nfunction resolveAppRoot(): string {\n  const fromEnv = process.env.OM_TEST_APP_ROOT?.trim();\n  return fromEnv ? path.resolve(fromEnv) : path.resolve(process.cwd(), 'apps/mercato');\n}\n\nfunction readEnvValue(key: string): string | undefined {\n  if (process.env[key]) return process.env[key];\n  const candidatePaths = [\n    path.resolve(resolveAppRoot(), '.env'),\n    path.resolve(process.cwd(), 'apps/mercato/.env'),\n    path.resolve(process.cwd(), '.env'),\n  ];\n  for (const envPath of candidatePaths) {\n    try {\n      const content = readFileSync(envPath, 'utf-8');\n      const match = content.match(new RegExp(`^${key}=(.+)$`, 'm'));\n      if (match?.[1]) return match[1].trim();\n    } catch {\n      continue;\n    }\n  }\n  return undefined;\n}\n\nfunction resolveDatabaseUrl(): string {\n  const url = readEnvValue('DATABASE_URL');\n  if (!url) throw new Error('[internal] DATABASE_URL is not configured for AI Assistant integration DB fixtures');\n  return url;\n}\n\nasync function withClient<T>(run: (client: Client) => Promise<T>): Promise<T> {\n  const client = new Client({ connectionString: resolveDatabaseUrl() });\n  await client.connect();\n  try {\n    return await run(client);\n  } finally {\n    await client.end();\n  }\n}\n\nexport type SeededPendingActionStatus =\n  | 'pending'\n  | 'confirmed'\n  | 'cancelled'\n  | 'expired'\n  | 'executing'\n  | 'failed';\n\nexport interface SeedPendingActionInput {\n  tenantId: string;\n  organizationId?: string | null;\n  createdByUserId: string;\n  status?: SeededPendingActionStatus;\n  agentId?: string;\n  toolName?: string;\n  /** Minutes from now until expiry. Negative => the row is already expired. */\n  expiresInMinutes?: number;\n  normalizedInput?: Record<string, unknown>;\n  executionResult?: Record<string, unknown> | null;\n  idempotencyKey?: string;\n}\n\nexport interface SeededPendingAction {\n  id: string;\n  idempotencyKey: string;\n}\n\n/**\n * Inserts an `ai_pending_actions` row directly. Returns the new id so the test\n * can act on it and clean it up. Defaults produce an actionable `pending` row\n * with a future TTL; override `status`/`expiresInMinutes`/`executionResult` to\n * cover the idempotency short-circuit and 409 error branches.\n */\nexport async function seedPendingActionInDb(input: SeedPendingActionInput): Promise<SeededPendingAction> {\n  const idempotencyKey = input.idempotencyKey ?? `it-pending-${randomUUID()}`;\n  const status = input.status ?? 'pending';\n  const expiresInMinutes = input.expiresInMinutes ?? 60;\n  const normalizedInput = JSON.stringify(input.normalizedInput ?? {});\n  const executionResult =\n    input.executionResult === undefined || input.executionResult === null\n      ? null\n      : JSON.stringify(input.executionResult);\n  return withClient(async (client) => {\n    const result = await client.query<{ id: string }>(\n      `insert into ai_pending_actions\n         (id, tenant_id, organization_id, agent_id, tool_name, normalized_input,\n          field_diff, attachment_ids, idempotency_key, created_by_user_id, status,\n          queue_mode, execution_result, created_at, expires_at)\n       values\n         (gen_random_uuid(), $1, $2, $3, $4, $5::jsonb,\n          '[]'::jsonb, '[]'::jsonb, $6, $7, $8,\n          'inline', $9::jsonb, now(), now() + make_interval(mins => $10::int))\n       returning id`,\n      [\n        input.tenantId,\n        input.organizationId ?? null,\n        input.agentId ?? 'it_agent.pending_fixture',\n        input.toolName ?? 'it_tool.noop',\n        normalizedInput,\n        idempotencyKey,\n        input.createdByUserId,\n        status,\n        executionResult,\n        expiresInMinutes,\n      ],\n    );\n    return { id: result.rows[0].id, idempotencyKey };\n  });\n}\n\n/** Hard-deletes a seeded pending action row (best-effort test cleanup). */\nexport async function deletePendingActionInDb(id: string | null): Promise<void> {\n  if (!id) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_pending_actions where id = $1', [id]);\n  });\n}\n\n/**\n * Sweeps every per-agent override row for a tenant across the three override\n * tables. Required for `prompt-override` cleanup (no DELETE route) and used as a\n * belt-and-braces teardown for mutation-policy / loop overrides.\n */\nexport async function deleteAgentOverridesInDb(input: { tenantId: string; agentId: string }): Promise<void> {\n  if (!input.tenantId || !input.agentId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_agent_prompt_overrides where tenant_id = $1 and agent_id = $2', [\n      input.tenantId,\n      input.agentId,\n    ]);\n    await client.query('delete from ai_agent_mutation_policy_overrides where tenant_id = $1 and agent_id = $2', [\n      input.tenantId,\n      input.agentId,\n    ]);\n    await client.query('delete from ai_agent_runtime_overrides where tenant_id = $1 and agent_id = $2', [\n      input.tenantId,\n      input.agentId,\n    ]);\n  });\n}\n\n/** Hard-deletes any tenant model-allowlist rows (best-effort cleanup). */\nexport async function deleteTenantAllowlistInDb(tenantId: string | null): Promise<void> {\n  if (!tenantId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_tenant_model_allowlists where tenant_id = $1', [tenantId]);\n  });\n}\n\nexport interface SeedModerationFlagInput {\n  tenantId: string;\n  organizationId?: string | null;\n  agentId?: string;\n  userId?: string;\n  providerId?: string;\n  modelId?: string;\n  /** Defaults to a single flagged `hate` category. */\n  categories?: Record<string, { flagged: boolean; score: number }>;\n}\n\n/**\n * Inserts an `ai_moderation_flags` audit row directly. A real flag is only ever\n * born from the gate during a flagged LLM turn (needs a live moderation call),\n * so seeding the row keeps audit-listing + tenant-isolation coverage\n * deterministic and provider-free. Returns the new id for assertions/cleanup.\n */\nexport async function seedModerationFlagInDb(input: SeedModerationFlagInput): Promise<string> {\n  const categories = JSON.stringify(input.categories ?? { hate: { flagged: true, score: 0.97 } });\n  return withClient(async (client) => {\n    const result = await client.query<{ id: string }>(\n      `insert into ai_moderation_flags\n         (id, tenant_id, organization_id, agent_id, user_id, provider_id, model_id, categories, created_at)\n       values\n         (gen_random_uuid(), $1, $2, $3, $4, $5, $6, $7::jsonb, now())\n       returning id`,\n      [\n        input.tenantId,\n        input.organizationId ?? null,\n        input.agentId ?? 'it_agent.moderation_fixture',\n        input.userId ?? `it-user-${randomUUID()}`,\n        input.providerId ?? 'openai',\n        input.modelId ?? 'gpt-5-mini',\n        categories,\n      ],\n    );\n    return result.rows[0].id;\n  });\n}\n\n/** Hard-deletes every moderation-flag row for a tenant (best-effort cleanup). */\nexport async function deleteModerationFlagsInDb(tenantId: string | null): Promise<void> {\n  if (!tenantId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_moderation_flags where tenant_id = $1', [tenantId]);\n  });\n}\n\n/**\n * Hard-deletes a conversation and its participant + message rows by the\n * client-facing `conversation_id`. The DELETE route only soft-deletes, so this\n * gives specs a true teardown for the rows they created.\n */\nexport async function deleteConversationCascadeInDb(input: {\n  tenantId: string;\n  conversationId: string;\n}): Promise<void> {\n  if (!input.tenantId || !input.conversationId) return;\n  await withClient(async (client) => {\n    await client.query('delete from ai_chat_messages where tenant_id = $1 and conversation_id = $2', [\n      input.tenantId,\n      input.conversationId,\n    ]);\n    await client.query(\n      'delete from ai_chat_conversation_participants where tenant_id = $1 and conversation_id = $2',\n      [input.tenantId, input.conversationId],\n    );\n    await client.query('delete from ai_chat_conversations where tenant_id = $1 and conversation_id = $2', [\n      input.tenantId,\n      input.conversationId,\n    ]);\n  });\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,cAAc;AAqBvB,SAAS,iBAAyB;AAChC,QAAM,UAAU,QAAQ,IAAI,kBAAkB,KAAK;AACnD,SAAO,UAAU,KAAK,QAAQ,OAAO,IAAI,KAAK,QAAQ,QAAQ,IAAI,GAAG,cAAc;AACrF;AAEA,SAAS,aAAa,KAAiC;AACrD,MAAI,QAAQ,IAAI,GAAG,EAAG,QAAO,QAAQ,IAAI,GAAG;AAC5C,QAAM,iBAAiB;AAAA,IACrB,KAAK,QAAQ,eAAe,GAAG,MAAM;AAAA,IACrC,KAAK,QAAQ,QAAQ,IAAI,GAAG,mBAAmB;AAAA,IAC/C,KAAK,QAAQ,QAAQ,IAAI,GAAG,MAAM;AAAA,EACpC;AACA,aAAW,WAAW,gBAAgB;AACpC,QAAI;AACF,YAAM,UAAU,aAAa,SAAS,OAAO;AAC7C,YAAM,QAAQ,QAAQ,MAAM,IAAI,OAAO,IAAI,GAAG,UAAU,GAAG,CAAC;AAC5D,UAAI,QAAQ,CAAC,EAAG,QAAO,MAAM,CAAC,EAAE,KAAK;AAAA,IACvC,QAAQ;AACN;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBAA6B;AACpC,QAAM,MAAM,aAAa,cAAc;AACvC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,oFAAoF;AAC9G,SAAO;AACT;AAEA,eAAe,WAAc,KAAiD;AAC5E,QAAM,SAAS,IAAI,OAAO,EAAE,kBAAkB,mBAAmB,EAAE,CAAC;AACpE,QAAM,OAAO,QAAQ;AACrB,MAAI;AACF,WAAO,MAAM,IAAI,MAAM;AAAA,EACzB,UAAE;AACA,UAAM,OAAO,IAAI;AAAA,EACnB;AACF;AAmCA,eAAsB,sBAAsB,OAA6D;AACvG,QAAM,iBAAiB,MAAM,kBAAkB,cAAc,WAAW,CAAC;AACzE,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,mBAAmB,MAAM,oBAAoB;AACnD,QAAM,kBAAkB,KAAK,UAAU,MAAM,mBAAmB,CAAC,CAAC;AAClE,QAAM,kBACJ,MAAM,oBAAoB,UAAa,MAAM,oBAAoB,OAC7D,OACA,KAAK,UAAU,MAAM,eAAe;AAC1C,SAAO,WAAW,OAAO,WAAW;AAClC,UAAM,SAAS,MAAM,OAAO;AAAA,MAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA;AAAA,QACE,MAAM;AAAA,QACN,MAAM,kBAAkB;AAAA,QACxB,MAAM,WAAW;AAAA,QACjB,MAAM,YAAY;AAAA,QAClB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,IAAI,eAAe;AAAA,EACjD,CAAC;AACH;AAGA,eAAsB,wBAAwB,IAAkC;AAC9E,MAAI,CAAC,GAAI;AACT,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,gDAAgD,CAAC,EAAE,CAAC;AAAA,EACzE,CAAC;AACH;AAOA,eAAsB,yBAAyB,OAA6D;AAC1G,MAAI,CAAC,MAAM,YAAY,CAAC,MAAM,QAAS;AACvC,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,gFAAgF;AAAA,MACjG,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AACD,UAAM,OAAO,MAAM,yFAAyF;AAAA,MAC1G,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AACD,UAAM,OAAO,MAAM,iFAAiF;AAAA,MAClG,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,EACH,CAAC;AACH;AAGA,eAAsB,0BAA0B,UAAwC;AACtF,MAAI,CAAC,SAAU;AACf,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,+DAA+D,CAAC,QAAQ,CAAC;AAAA,EAC9F,CAAC;AACH;AAmBA,eAAsB,uBAAuB,OAAiD;AAC5F,QAAM,aAAa,KAAK,UAAU,MAAM,cAAc,EAAE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,EAAE,CAAC;AAC9F,SAAO,WAAW,OAAO,WAAW;AAClC,UAAM,SAAS,MAAM,OAAO;AAAA,MAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA;AAAA,QACE,MAAM;AAAA,QACN,MAAM,kBAAkB;AAAA,QACxB,MAAM,WAAW;AAAA,QACjB,MAAM,UAAU,WAAW,WAAW,CAAC;AAAA,QACvC,MAAM,cAAc;AAAA,QACpB,MAAM,WAAW;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO,KAAK,CAAC,EAAE;AAAA,EACxB,CAAC;AACH;AAGA,eAAsB,0BAA0B,UAAwC;AACtF,MAAI,CAAC,SAAU;AACf,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,wDAAwD,CAAC,QAAQ,CAAC;AAAA,EACvF,CAAC;AACH;AAOA,eAAsB,8BAA8B,OAGlC;AAChB,MAAI,CAAC,MAAM,YAAY,CAAC,MAAM,eAAgB;AAC9C,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO,MAAM,8EAA8E;AAAA,MAC/F,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AACD,UAAM,OAAO;AAAA,MACX;AAAA,MACA,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,IACvC;AACA,UAAM,OAAO,MAAM,mFAAmF;AAAA,MACpG,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,EACH,CAAC;AACH;",
   "names": []
 }

package/dist/modules/ai_assistant/api/ai/chat/route.js

@@ -11,6 +11,7 @@ import {
   resolveLoopBudgetPreset
 } from "../../../lib/agent-runtime.js";
 import { AgentPolicyError } from "../../../lib/agent-tools.js";
+import { AiModerationBlockedError, AiModerationUnavailableError } from "../../../lib/moderation.js";
 import { readBaseurlAllowlist, isBaseurlAllowlisted } from "../../../lib/baseurl-allowlist.js";
 import {
   canonicalProviderId,
@@ -549,6 +550,12 @@ async function POST(req) {
     if (error instanceof AgentPolicyError) {
       return jsonError(statusForDenyCode(error.code), error.message, error.code);
     }
+    if (error instanceof AiModerationBlockedError) {
+      return jsonError(400, "Input rejected by the content safety filter.", "moderation_blocked");
+    }
+    if (error instanceof AiModerationUnavailableError) {
+      return jsonError(503, "Content safety check temporarily unavailable.", "moderation_unavailable");
+    }
     logger.error("AI Chat Agent \u2014 Dispatch failure", { err: error });
     return jsonError(
       500,